"Your Recent Download with Your Apple ID" Phishing Scam

Comments: 0
Views: 1,104
Save
Updated: Sep. 5, 2017 2017-09-05T04:36:09
Posted: Sep. 5, 2017 2017-09-05T04:30:39
Online Threat Alerts (OTA)

The email message below, which claims the recipients' Apple IDs have been used to download OS Maps from iTunes Store on a computer or device that is not associated with their Apple IDs, is a phishing scam. The phishing email message is being sent by cybercriminals to trick Apple users into clicking on the link in it. The link in the email message goes to a fake Apple website that will ask visitors to sign-in. Once visitors attempt to sign into the fake website with their Apple user names and passwords, the same information will be sent to the cybercriminals behind the phishing scam.

The "Your Recent Download with Your Apple ID" Phishing Scam

Subject: Re: Your recent download with your Apple ID

Apple Recent Download

Dear,

Your Apple ID, has just been used to download OS Maps from the iTunes Store on a computer or device that had not previously been associated with your Apple ID. You may also be receiving this email if you reset your password since your last purchase.

If you initiated this download, you can disregard this email. It was only sent to alert you in case you had not initiated this download yourself.

If you did not initiate this download, we recommend that you go to iforgot.apple.com to change your password, then see Apple ID: Security and your Apple ID for further assistance.

Sincerely,

Apple

Apple

Apple ID Summary • Terms of Sale • Privacy Policy

Copyright © 2017 Apple Distribution International,

All rights reserved

Once the cybercriminals have received the stolen Apple usernames and passwords, they will use it to hijack their potential victims’ Apple accounts and use them fraudulently. Therefore, Apple users who have been tricked by the phishing scam are asked to change their Apple accounts' password, check their accounts for discrepancies and contact Apple for help if any is found.

This is another reason why Apple user should never click on links in email or other messages to sign into their accounts, they should instead, go directly to https://appleid.apple.com/ and sign-in from there. If there is something that needs to be done their accounts, they will be notified after signing in.